hmm... In reality however, the number of actual users I've seen complain about long sessions in my 14 years of heavy web use would be about zero.

It's a security issue, I'll write a blog entry to explain a little so that others can be aware of the reasoning behind it (i'll post back here shortly with the link). Believe me, the easy option would be to set a huge default, but it would mean that dotnetnuke would me a much larger target for hackers.

Cathal

Thanks, Cathal. I understand your difficulty in trying to balance security with functionality, so I'll come down off my soapbox. We truly do appreciate the response!